Oracle Reports Developer Component 12.2.1.3 – Cross-site Scripting

Microsoft Windows 10 – XmlDocument Insecure Sharing Privilege Escalation

NTPsec 1.1.2 – ‘ctl_getitem’ Out-of-Bounds Read (PoC)

Spotify 1.0.96.181 – ‘Proxy configuration’ Denial of Service (PoC)

WebKit JSC JIT – GetIndexedPropertyStorage Use-After-Free

Blueimp’s jQuery File Upload 9.22.0 – Arbitrary File Upload Exploit

Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory in Invalid Array Length

GL-AR300M-Lite 2.27 – Authenticated Command Injection / Arbitrary File Download / Directory Traversal

Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 – Unauthenticated Admin Password Reset

NTPsec 1.1.2 – ‘ntp_control’ Authenticated NULL Pointer Dereference (PoC)